RocketSwap - REKT

Base is having its moment in the spotlight.
But presumably not for the reasons Coinbase would like.
RocketSwap has lost ~$869k to compromised private keys, allegedly stolen in a bruteforce attack on the project’s server.
And it’s not even the first time they’ve been in hot water.
Two weeks ago, the high-profile rugpull of BALD was followed quickly by LeetSwap getting rekt.
This feels like the same old familiar story of low-effort cash grabs capitalising on the FOMO of missing the 'next big thing'.
If Base is supposed to be our new hope for a boom in retail adoption, we'll have to do better than this…

Credit: Certik, Peckshield, RocketSwap
At approximately 11pm UTC on August 14th, RocketSwap's farming contracts were drained via an internal address.
If the team is to be believed, the project's announcement of the incident states that the keys were bruteforced from the server on which they were stored:
We are sorry to inform you that the team needed to use offline signatures when deploying the launchpad and put the private keys on the server.
A brute force hack of the server was detected, and due to the proxy contract used for the farm contract, there were multiple high-risk permissions that led to the transfer of the farm's assets.
We shut down the farm to prevent further damage.
The team have promised to redeploy the farming contracts directly, i.e. not via a proxy contract, and relinquish minting privileges.
But with comments disabled on their tweets and the community Telegram also on pause, one wonders why they are so keen to control the narrative…
Attacker’s address: 0x96c0876F573e27636612CF306C9db072d2B13DE8
The attacker bridged 472 ETH back to Ethereum as well as launched their own memecoin with 400 ETH liquidity, maybe hoping for a repeat of the BALD frenzy.

While Base may be Coinbase signaling to the community that they still believe in crypto's core principles, especially whilst under pressure from the SEC, this messy start might just spur on Gensler even further.
Building on top of OP, one of the more utopian visions for crypto and with a strong focus on public goods, is a show of support for what the tech could accomplish and a motivating force during times when spirits are low across the industry.
Though even the most well-intentioned platforms sometimes beggar belief with their inability to read the room.
But Base itself is, so far, drawing parallels to the early days of BSC, a new chain launched by a CEX, full of memecoins and quick rugs (another project, SwirlLend, has rugged since).
This stage may just be part of the natural evolution of a new chain...
Are all experiments destined to go through the same ordeal?

REKT는 익명 작성자들에 의한 공공 플랫폼이며, REKT에 작성된 관점이나 내용에 대해서 그 어떤 책임도 지지 않습니다.
기부 (ETH / ERC20): 0x3C5c2F4bCeC51a36494682f91Dbc6cA7c63B514C
disclaimer:
REKT는 당사 웹 사이트의 익명의 작성자 또는 REKT에 의해 게시되거나 관련된 서비스에서 게시되는 콘텐츠에 대해 어떠한 책임도 지지 않습니다. 당사는 익명 작성자들의 행동 및 게시물에 대한 규칙을 제공하지만, 익명의 작성자가 웹 사이트 또는 서비스에 게시, 전송 혹은 공유한 내용을 통제하거나 책임지지 않으며, 귀하가 웹 사이트 또는 서비스에서 직면할 수 있는 불쾌함, 부적절함, 음란함, 불법 또는 기타 해로운 콘텐츠에 대해서도 책임을 지지 않습니다. REKT는 당사 웹 사이트 또는 서비스 사용자의 온라인 또는 오프라인 행위에 대한 책임을 지지 않습니다.
추천 기사들......
BALD on Base - REKT
Coinbase’s compliant and grown-up L2 is already a shitshow. BALD pulled the rug for $23M, and the deployer has some interesting connections... YOLO-mania is in full force while DeFi burns.
Tapioca DAO - Rekt
Another day, another private key theft, another protocol rekt. Tapioca DAO on Arbitrum suffers a roughly $4.4 million loss in a private key compromise. Some funds have been recovered, though the full extent of the damage remains to be seen.
Radiant Capital - Rekt II
Radiant Capital gets a $53M haircut. Thought multi-sigs were safe? Think again. Radiant's "robust" 3/11 setup crumbled like a house of cards. Exploited twice in 2024, the future of Radiant looks about as bright as a black hole.